Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3adcb153-d751-320a-a003-e4b119f2a520.roa
File:                     3adcb153-d751-320a-a003-e4b119f2a520.roa (raw, json)
Hash identifier:          W+xJLX059DbN/CX1m+GVmeeiccyZBym5rfzyqOOkDQs=
Subject key identifier:   93:EF:7B:E7:0D:90:CC:2A:B4:12:49:AB:03:1D:93:14:6D:97:88:7C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849C79F7774262DA42C894F3700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3adcb153-d751-320a-a003-e4b119f2a520.roa
Signing time:             Thu 08 May 2025 01:00:47 +0000
ROA not before:           Thu 08 May 2025 01:00:47 +0000
ROA not after:            Wed 06 Aug 2025 01:00:47 +0000
asID:                     6167
IP address blocks:        174.239.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c7:9f:77:74:26:2d:a4:2c:89:4f:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  8 01:00:47 2025 GMT
            Not After : Aug  6 01:00:47 2025 GMT
        Subject: CN=bb7594c9-15ec-4f18-bd2e-29a511e2ad52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:99:47:a5:fb:a8:ba:55:34:55:70:79:ab:43:
                    24:85:31:21:63:07:07:55:1e:0f:79:30:7d:48:ca:
                    09:a3:39:4f:32:de:31:13:c3:48:9e:ad:47:90:d9:
                    76:b2:10:98:47:0f:13:1f:25:6d:53:07:3e:75:77:
                    b0:6e:84:7d:db:af:ba:cc:ac:df:53:fb:06:96:d2:
                    e0:fd:0e:ad:01:3d:e9:18:ce:c8:69:f6:80:83:6c:
                    78:77:8c:22:a4:d6:60:d0:d2:4b:6d:37:42:8d:af:
                    38:dc:92:53:7d:65:32:90:d8:47:9a:e1:87:3d:f4:
                    2e:a1:ef:42:87:f7:25:f2:e4:31:b4:9e:23:e1:dc:
                    5a:0e:5d:98:49:90:a7:e2:51:d9:b8:f3:ed:76:7c:
                    e1:ec:63:c6:8e:af:c7:55:37:da:02:c2:44:93:ee:
                    6f:f9:ce:c7:fb:82:68:ad:12:7c:1b:27:82:44:74:
                    d7:f3:62:68:61:65:b6:5d:e2:34:47:97:37:0c:11:
                    55:09:bf:db:4f:0a:f2:a2:6d:ee:b4:09:57:17:42:
                    cd:84:23:b0:8d:ae:46:34:79:1b:f4:61:82:6a:a3:
                    2a:00:e3:84:ed:b8:28:7a:1d:44:59:45:45:61:28:
                    88:d2:3a:e6:ec:ba:d3:d8:52:f0:92:33:4c:86:7d:
                    24:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:EF:7B:E7:0D:90:CC:2A:B4:12:49:AB:03:1D:93:14:6D:97:88:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3adcb153-d751-320a-a003-e4b119f2a520.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.239.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:c7:08:b4:59:27:81:4d:49:c5:42:e7:44:d9:77:f5:21:f9:
         e8:db:f2:1c:f0:a7:9e:c2:4e:92:e2:9e:e2:4e:4a:90:70:6d:
         8e:b5:7f:d2:36:5e:52:d5:9b:8f:fe:54:ab:8b:6b:65:a1:1c:
         f9:9c:0b:54:72:d7:4c:5b:1e:39:c7:67:5e:c9:89:e5:97:e6:
         7c:7c:a5:9f:e3:01:88:94:c1:f6:80:c8:b5:95:0a:46:21:f3:
         af:2d:15:93:92:37:2d:82:d1:d8:cf:08:00:07:c8:ec:b8:f2:
         d0:dd:d7:d1:9a:08:3d:10:d0:2a:de:54:e8:14:5e:76:1a:24:
         13:a0:b7:cb:b8:30:f5:ec:30:b0:3c:bf:a3:96:8c:d0:53:b0:
         a5:dc:fe:f3:fb:0b:a8:2b:81:23:92:8b:23:76:fe:35:83:41:
         fe:66:91:2b:99:40:e6:5b:fd:85:72:18:4a:b3:33:57:0c:01:
         7c:bd:98:63:22:74:85:8f:74:8c:36:14:15:bc:3f:5e:62:ac:
         92:fe:e0:bb:0d:7e:9c:26:fd:37:7d:06:15:d7:88:94:07:86:
         f3:1f:fe:a5:13:59:5c:00:be:90:cb:db:e5:80:55:63:6a:16:
         c6:d0:67:a9:42:24:da:97:13:c1:95:85:d1:c2:df:96:2a:b4:
         fb:9e:e2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:42:22 2025 by rpki-client